SailPoint Entro API Key
Service Name: SailPoint Entro
Service Description: SailPoint Entro is a platform that helps organizations discover, validate, and manage secrets across their infrastructure. It provides tools for detecting exposed credentials and ensuring secure secret management.
Service Address: https://entro.security/
Validation Type: API Auth
IP Allow list: Does not exist
Secret Access Scope: Grants access to Entro Security's API services, allowing users to perform scans and manage secrets.
Secret Revokement URL: Does not exist
Secret Example: ent_ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLM==
Suspicious Activity Investigation Instructions:
- Review Entro Security dashboard for unauthorized scan activities
- Check API logs for unusual access patterns or unauthorized IP addresses
- Monitor for unexpected changes to scan configurations or settings
- Verify that API calls are coming from authorized applications and services
Mitigation Instructions:
- Rotate the compromised API key immediately through the Entro Security dashboard
- Generate a new API key with appropriate permissions
- Update all applications and services using the old key with the new one
- Review and adjust access permissions for the new API key as needed
- Implement IP restrictions for API access if possible